Summary: we collect only what we need to run the waitlist and the Service, we don't use tracking cookies, and we do not sell or share your personal information. You can ask us to access or delete your data at any time by emailing hello@answerroster.com.
1. Who is responsible
The controller of your personal data is Cloudsource BV (trading as AnswerRoster), Robert Schumanplein 2-4, 1040 Brussels, Belgium, VAT BE0661.832.285. Contact: hello@answerroster.com.
2. What we collect
When you join the waitlist
- Email address (required);
- Agency name, website and approximate number of client brands (optional, if you provide them);
- The time you gave consent to receive early-access emails, and which page you signed up on;
- For abuse and spam prevention: a one-way hash of your IP address (we do not store the IP address itself) and your browser's user-agent string.
When you use the Service (once access opens)
- Account details (name, email, agency name, logo and brand color);
- The brand information you enter to generate reports: business names, domains, categories and cities. This is normally business information, but may include personal data where, for example, a business is named after a person;
- The reports we generate and basic usage and security logs.
When you email us
Your email address and the contents of your message.
We do not ask for, and ask you not to enter, sensitive personal data.
3. How we use it and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Emailing you about early access and launch | Your consent (Art. 6(1)(a)); you can withdraw it anytime |
| Providing the Service and generating reports | Performance of our contract with you (Art. 6(1)(b)) |
| Preventing spam, abuse and fraud; securing the Service | Our legitimate interests (Art. 6(1)(f)) |
| Answering support requests | Contract or legitimate interests |
| Billing, invoicing and tax records (once paid plans launch) | Contract and legal obligations (Art. 6(1)(b) and (c)) |
4. AI providers
To generate a report, we send questions that include the brand names, domains, categories and cities you enter to the AI providers we query — OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini) and Perplexity — through their APIs. Their answers are stored as part of your report. We do not send your waitlist details or account details to AI providers.
5. Service providers (processors)
We use the following categories of service providers, who process data on our behalf under contractual safeguards:
- Cloudflare — website hosting, serverless functions, database and storage;
- AI providers — OpenAI, Anthropic, Google and Perplexity, to generate answers for reports (see section 4);
- Paddle (Paddle.com) — once paid plans are available, Paddle acts as our reseller and Merchant of Record and receives the details needed to process your order (such as name, email, billing address, payment and tax details). Paddle processes payment data under its own privacy notice; we do not receive or store your full card details;
- Email provider — to send early-access and service emails.
6. How long we keep it
- Waitlist data: until you unsubscribe or 24 months after you signed up, whichever comes first. After unsubscribing we may keep your email address on a suppression list so we don't email you again.
- Account data and reports: for as long as you have an account, then deleted within a reasonable period, unless we must keep it longer by law (for example, billing and tax records).
- Support emails: as long as needed to handle your request and related follow-up.
7. Your rights
Depending on where you live, you have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent at any time (without affecting processing before withdrawal). To exercise any of these rights, email hello@answerroster.com. We will respond within the time required by law (for GDPR, within one month). We may need to verify your identity. You can unsubscribe from waitlist emails at any time via the link in our emails or at answerroster.com/unsubscribe.
8. We do not sell or share your personal information
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar US state laws. We do not use your data for targeted advertising. California and other US residents may exercise their rights to know, correct and delete by emailing us; we will not discriminate against you for doing so.
9. Cookies
We do not use tracking, analytics or advertising cookies, and we don't load third-party trackers or fonts. If you use the Service once access opens, we use only strictly necessary cookies (for example, to keep you signed in).
10. International transfers
Some of our service providers (including the AI providers and Cloudflare) process data in the United States or other countries outside the European Economic Area. Where we transfer personal data outside the EEA, we rely on appropriate safeguards such as the EU–US Data Privacy Framework where the recipient is certified, or the European Commission's Standard Contractual Clauses.
11. Security
We are committed to protecting your personal data and take appropriate technical and organizational measures, in line with Article 32 GDPR, to protect it against unauthorized access, loss, alteration or disclosure. These include:
- encryption in transit (HTTPS/TLS) for the website and the Service;
- data minimization — for example, we store only a one-way hash of IP addresses, not the addresses themselves;
- access controls that limit access to personal data to people who need it to run the Service;
- keeping credentials and API keys server-side, never exposed in the browser;
- using reputable service providers bound by contractual confidentiality and security obligations.
If a personal data breach occurs that is likely to put your rights at risk, we will notify the competent supervisory authority and, where required, you, as required by law. No method of transmission or storage is completely secure, but we review our measures regularly. To report a security concern, email hello@answerroster.com.
12. Children
The Service is intended for businesses and is not directed at children under 16. We do not knowingly collect their data.
13. Changes
We may update this policy. We will post changes on this page with a new "last updated" date and, for material changes, notify you by email where appropriate.
14. Contact and complaints
Questions or requests: hello@answerroster.com, or by post to Cloudsource BV, Robert Schumanplein 2-4, 1040 Brussels, Belgium.
You have the right to lodge a complaint with a supervisory authority. In Belgium this is the Data Protection Authority — Gegevensbeschermingsautoriteit / Autorité de protection des données, Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels (www.dataprotectionauthority.be). You can also contact the authority in the EU country where you live or work.